关于SQL中传递参数的模糊查询

Question

分开写啊，呵呵String sql = "select * from TABLE where title like '%"+你的变量+"%'";

Answer 1

String sql = "select SC_COMP,SC_URL,SC_EMAIL,SC_TITLE, from SC_INFO where SC_INDUST = ? and SC_OCCUP = ? and SC_LOC = ? and SC_DEGREE <=? and SC_WORKYEAR <=? and SC_TITLE like '%?%' and SC_BLOCKED != ? and (SYSDATE-?) <= SC_PUBDATE <= SYSDATE";            try
            {
                prstm = _con.prepareStatement(sql);
                prstm.setString(1, _indust);
                prstm.setString(2, _occup);
                prstm.setString(3, _loc);
                prstm.setInt(4, _deg);
                prstm.setInt(5,_workYear);
                prstm.setString(6,_keyWord);
                prstm.setString(7,_blocked);
                prstm.setInt(8,_pubDate);                rs = prstm.executeQuery();